Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that contains security fixes can now be installed.
An update that solves three vulnerabilities and has two fixes is now available.
It was discovered that zsh, a powerful shell and scripting language, did not prevent recursive prompt expansion. This would allow an attacker to execute arbitr…
Upstream upgrade to fix chfn and chsh issue (CVE-2022-0563).
- update to latest upstream release (fixes CVE-2021-45444)
New upstream release varnish-6.6.2. A security release. Includes fix for CVE-2022-23959
Rebase to version 2.4.4
Multiple security issues were discovered in LibreCAD, an application for computer aided design (CAD) which could result in denial of service or the execution o…
cryptsetup could be made to expose sensitive information.
Security researchers of JFrog Security and Ismail Aydemir discovered two remote code execution vulnerabilities in the H2 Java SQL database engine which can be …
- Updated to latest upstream (97.0)
This is the December 2021 update for .NET Core 3.1 It updates .NET Core 3.1 to SDK 3.1.416 and Runtime 3.1.22
This is the December 2021 update for .NET Core 3.1 It updates .NET Core 3.1 to SDK 3.1.416 and Runtime 3.1.22
Security researchers of JFrog Security and Ismail Aydemir discovered two remote code execution vulnerabilities in the H2 Java SQL database engine which can be …
This update upgrades Firefox to version 91.6.0 ESR. * Mozilla: Extensions could have bypassed permission confirmation during update (CVE-2022-22754) * Mozilla:…
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
Firefox could be made to crash or run programs as your login if it opened a malicious website.
An update that solves 6 vulnerabilities, contains one feature and has one errata is now available.
It was found that PgBouncer, a PostgreSQL connection pooler, was susceptible to an arbitrary SQL injection attack if a man-in-the-middle could inject data when…
James Kettle discovered that a request smuggling attack can be performed on HTTP/1 connections on Varnish servers, high-performance web accelerators. The smugg…
Several vulnerabilities have been discovered in Minetest, a sandbox video game and game creation system. These issues may allow attackers to manipulate game mo…
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable distribu…
Security update for CVE-2022-23303, CVE-2022-23304 Update to version 2.10, which upstream maintainer advises for these CVEs.
